Skip to main content
Blog December 14, 2018

Ncrack and Nmap NSE development for offense and defense - DEFCON CHINA

Paulino Calderon (@calderpwn) represented Websec in the first edition in China of the world-renowned DEFCON event. Here we share all the material of your workshop.

Share this article:

Last May, Paulino Calderon of Websec together with Fotis Chantzis and Evangelos Deimer of the Ncrack development team  gave the workshop ' Ncrack and Nmap NSE development for offense and defense ' in the first edition of DEFCON China. 

The description of the workshop was the following:

This workshop will teach participants how to use Nmap, the Nmap Scripting Engine (NSE) and Ncrack to extend the power and capabilities of Nmap. It will cover the basics of the Nmap usage, NSE, and the Lua programming language before diving into how to solve problems by writing custom scripts and modules. By the end of the workshop, you will have in depth knowledge of Nmap, Ncrack, the Nmap Scripting engine and how to develop NSE scripts and Ncrack modules for offensive and defensive tasks. Participants will be provided with a virtual machine that they can use during the training.

 

Next, we share the slide download link and the workshop material:

Ncrack and Nmap NSE development for offense and defense

 

Subscribe to our Newsletter

Get the latest cybersecurity insights and updates delivered to your inbox.

Related Articles

Discover more cybersecurity insights and solutions to help strengthen your organization's security posture

Image unavailable
Blog October 3, 2023

A Comparison Between the Real User ID and the Effective User ID is not Enough to Prevent Privilege Escalation

In Unix-like systems, processes have a real and effective user ID determining their access permissions. While usually identical, they can differ in situations like when the setuid bit is activated in executables.

Image unavailable
Blog May 19, 2022

CVE-2022-21404: Another story of developers fixing vulnerabilities unknowingly because of CodeQL

How CodeQL may help reduce false negatives within Open-Source projects. Taking a look into a deserialization vulnerability within Oracle Helidon (CVE-2022-21404).

Image unavailable
Blog September 2, 2021

Cybersecurity in Web Applications - Where to start? Where to improve? Where to learn more?

A list of resources for web application security and a short description of what each resource covers.